Apple Releases Broad Security Fixes for iOS, macOS and Older Devices
Vulnerability Disclosure · 32 sources · Updated 1h ago · First seen Oct 26, 2026

Apple released security updates across current and older operating systems, alongside Safari 27.2, with reported fixes for 163 vulnerabilities in iOS and iPadOS 27.2 and 263 in macOS Golden Gate 27.2. Apple’s macOS advisory describes flaws enabling remote arbitrary code execution, root or system privilege escalation, sandbox escapes, Gatekeeper bypasses, and unauthorized access to sensitive user data. Potential attack vectors include malicious web content, files, disk images, network peers, and nearby devices. Fixes address memory safety, authentication, access restrictions, and path validation, among other weaknesses.
Older devices also receive patches through iOS and iPadOS 18.7.11, which reportedly address three vulnerabilities, including one described as a zero-day. The reporting does not establish whether that flaw was actively exploited or provide its CVE identifier; coverage of iOS 27.2 likewise identifies no actively exploited vulnerabilities. Enterprise administrators should prioritize deployment across supported device fleets, including older releases, while consulting Apple’s advisories for applicable fixes. iOS 27.2 also introduces redesigned controls over app access by Siri, Search, and suggestions, an alternative EU App Tracking Transparency prompt, and SynthID labeling for Image Playground images and certain Photos edits.


